瑞星卡卡安全论坛
非凡123 - 2007-9-18 1:43:00
瑞星卡卡电脑诊断日志 v1.30 (2007-9-18 1:23:34) 北京瑞星科技股份有限公司
注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
IDriverT
[A ] 1. c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
Macrovision Corporation
IDriverT Module
.text,.rdata,.data,.rsrc,
MDM
[AM] 2. c:\program files\common files\microsoft shared\vs7debug\mdm.exe
Microsoft Corporation
Machine Debug Manager
.text,.data,.rsrc,
NVSvc
[AM] 3. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 93.71
.text,.rdata,.data,.rsrc,
pr2ach4f
[A ] 4. c:\windows\system32\pr2ach4f.exe
SOFTSTAR
Chinese Paladin 4 CN Drivers Auto Removal
.text,.rdata,.data,.rsrc,
RfwProxySrv
[A ] 5. d:\瑞星个人防火墙\rfwproxy.exe
Beijing Rising Technology Co., Ltd.
Rising Personal Proxy Service
.text,.rdata,.data,.rsrc,
RfwService
[A ] 6. d:\瑞星个人防火墙\rfwsrv.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Service
.text,.rdata,.data,.rsrc,
RsCCenter
[A ] 7. d:\瑞星杀毒软件\ccenter.exe
Beijing Rising Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,
RsRavMon
[A ] 8. d:\瑞星杀毒软件\ravmond.exe
Beijing Rising Technology Co., Ltd.
RavMond
.text,.rdata,.data,.rsrc,
WMPNetworkSvc
[A ] 9. c:\program files\windows media player\wmpnetwk.exe
Microsoft Corporation
Windows Media Player 网络共享服务
.text,.data,.rsrc,.reloc,
WudfSvc
[A ] 10. c:\windows\system32\wudfsvc.dll
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Service
.text,.data,.rsrc,.reloc,
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
BaseTDI
[A ] 11. c:\windows\system32\drivers\basetdi.sys
Beijing Rising Technology Co., Ltd.
basetdi
.text,.rdata,.data,INIT,.rsrc,.reloc,
EagleNT
[A ] 12. c:\windows\system32\drivers\eaglent.sys
ExpScaner
[A ] 13. d:\瑞星杀毒软件\expscan.sys
ExpScan.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,
ft2kEnum
[A ] 14. c:\windows\system32\drivers\ic2kenum.sys
OEM Corporation
ic2k Bus Enumerator
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
fxs8brl
[A ] 15. c:\windows\system32\drivers\fxs8brl.sys
.text,.data,INIT,.reloc,
GDBaseSmc
[A ] 16. c:\windows\system32\drivers\chip_smc.sys
OEM
This is used by SRC 2000 Readers
page,.text,init,.rdata,.data,INIT,.rsrc,.reloc,
GD_USB
[A ] 17. c:\windows\system32\drivers\chip_usb.sys
USB Smart Card Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
GMSIPCI
[A ] 18. g:\install\gmsipci.sys
HDAudBus
[A ] 19. c:\windows\system32\drivers\hdaudbus.sys
Windows (R) Server 2003 DDK provider
High Definition Audio Bus Driver v1.0a
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
HookCont
[A ] 20. d:\瑞星杀毒软件\hookcont.sys
Rising
HookCont
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookReg
[A ] 21. d:\瑞星杀毒软件\hookreg.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookSys
[A ] 22. d:\瑞星杀毒软件\hooksys.sys
Rising
Hooksys
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookUrl
[A ] 23. d:\瑞星个人防火墙\hookurl.sys
Beijing Rising Technology Co., Ltd.
HookUrl
.text,.rdata,.data,INIT,.rsrc,.reloc,
IntcAzAudAddService
[A ] 24. c:\windows\system32\drivers\rtkhdaud.sys
Realtek Semiconductor Corp.
Realtek(r) High Definition Audio Function Driver
.text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,
JGOGO
[A ] 25. c:\windows\system32\drivers\jgogo.sys
JMicron
SCSI Port upper filter driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
JRAID
[A ] 26. c:\windows\system32\drivers\jraid.sys
JMicron Technology Corp.
JMicron JMB36X RAID Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
KAVBootC
[A ] 27. c:\windows\system32\drivers\kavbootc.sys
Kingsoft Corporation
KAVBootC Application
.text,.data,.CRT,INIT,.rsrc,.reloc,
MEMSCAN
[A ] 28. d:\瑞星杀毒软件\memscan.sys
Beijing Rising Technology Co., Ltd.
MemScan Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
mProcRs
[A ] 29. d:\瑞星个人防火墙\mprocrs.sys
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall mprocrs.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,
[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)附件:
944977200791813306.zip
非凡123 - 2007-9-18 1:44:00
npkcrypt
[A ] 30. c:\windows\system32\npkcrypt.sys
npkycryp
[A ] 31. c:\windows\system32\npkycryp.sys
pe3ach4f
[A ] 32. c:\windows\system32\drivers\pe3ach4f.sys
SOFTSTAR
Chinese Paladin 4 CN Environment Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
PnpWmkDrv
[A ] 33. c:\windows\system32\drivers\pnpwmkdrv.sys
.text,.rdata,.data,INIT,.reloc,
ps6ach4f
[A ] 34. c:\windows\system32\drivers\ps6ach4f.sys
SOFTSTAR
Chinese Paladin 4 CN Synchronization Driver
.text,.rdata,.data,.lisign2,PAGEI,PAGE,.xinit,.rsrc,.xreloc,
Reader_Device
[A ] 35. c:\windows\system32\drivers\usbic2k.sys
OEM
This is used by SRC 2000 Readers
page,.text,init,.rdata,.data,INIT,.rsrc,.reloc,
RivaTuner32
[A ] 36. f:\新建文件夹\rivatuner32.sys
RsAntiSpyware
[A ] 37. c:\windows\system32\drivers\rsboot.sys
Beijing Rising Technology Co., Ltd.
Anti-RootKit Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsFwDrv
[A ] 38. d:\瑞星个人防火墙\rsfwdrv.sys
Beijing Rising Technology Co., Ltd.
nt_fwdrv
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsNTGDI
[A ] 39. c:\windows\system32\drivers\rsntgdi.sys
Beijing Rising Technology Co., Ltd.
RsNTGDI
.text,.rdata,INIT,.rsrc,.reloc,
RSPPSYS
[A ] 40. d:\瑞星杀毒软件\rsppsys.sys
Rising
RSPPSYS.SYS
.text,.rdata,.data,INIT,.rsrc,.reloc,
RTL8023xp
[A ] 41. c:\windows\system32\drivers\rtnicxp.sys
Realtek Semiconductor Corporation
Realtek 10/100/1000 NDIS 5.1 Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
Secdrv
[A ] 42. c:\windows\system32\drivers\secdrv.sys
Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
Macrovision SECURITY Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,pnidata,
sptd
[A ] 43. c:\windows\system32\drivers\sptd.sys
WmNdisDrv
[A ] 44. c:\windows\system32\drivers\wmndisdrv.sys
.text,.rdata,.data,INIT,.reloc,
WudfPf
[A ] 45. c:\windows\system32\drivers\wudfpf.sys
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Platform Driver
.text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,
WudfRd
[A ] 46. c:\windows\system32\drivers\wudfrd.sys
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Reflector
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
XDva020
[A ] 47. c:\windows\system32\xdva020.sys
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
[AM] 48. c:\windows\system32\kakatool.dll
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Toolbar
.text,.rdata,.data,MonitorS,.rsrc,.reloc,
+ HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 50. d:\迅雷5\comdlls\tdatonce_now.dll
Thunder Networking Technologies,LTD
迅雷浏览器高级特性支持模块
.text,.rdata,.data,.rsrc,.reloc,
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 51. d:\迅雷5\comdlls\xunleibho_now.dll
Thunder Networking Technologies,LTD
XunLeiBHO
.text,.rdata,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 52. d:\迅雷5\thunder.exe
Thunder Networking Technologies,LTD
.text,.rdata,.data,.rsrc,
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
[A ] 53. c:\windows\system32\ieudinit.exe
Microsoft Corporation
IE Per User Active Setup Uninstall Utility
.text,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 54. c:\windows\system32\hticons.dll
Hilgraeve, Inc.
HyperTerminal Applet Library
.text,.data,.rsrc,.reloc,
非凡123 - 2007-9-18 1:44:00
IE Search Band
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Shell DocObject Viewer
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
InternetShortcut
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Url History Service
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
History
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Temporary Internet Files
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Temporary Internet Files
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Url Search Hook
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
The Internet
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Internet Name Space
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft BrowserBand
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Fade Task
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Desk Bar
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE AutoComplete
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Navigation Bar
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Site
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Band
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft History AutoComplete List
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Tracking Shell Menu
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE IShellFolderBand
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE BandProxy
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE MRU AutoComplete List
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE RSS Feeder Folder
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft Shell Folder AutoComplete List
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft Multiple AutoComplete List Container
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Browser Architecture
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Shell Rebar BandSite
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Shell Band Site Menu
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
&Links
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Registry Tree Options Utility
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE User Assist
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Custom MRU AutoCompleted List
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
非凡123 - 2007-9-18 1:45:00
Portable Media Devices
[A ] 55. c:\windows\system32\audiodev.dll
Microsoft Corporation
Portable Media Devices Shell Extension
.text,.data,.rsrc,.reloc,
Portable Devices
[A ] 56. c:\windows\system32\wpdshext.dll
Microsoft Corporation
Portable Devices Shell Extension
.text,.data,.rsrc,.reloc,
Portable Devices Menu
[A ] 56. c:\windows\system32\wpdshext.dll
Microsoft Corporation
Portable Devices Shell Extension
.text,.data,.rsrc,.reloc,
WinRAR shell extension
[AM] 57. d:\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,
NvCpl DesktopContext Class
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,CONST,.rsrc,.reloc,
Play on my TV helper
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,CONST,.rsrc,.reloc,
Desktop Explorer
[AM] 59. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Desktop Explorer Menu
[AM] 59. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
nView Desktop Context Menu
[AM] 59. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Web Folders
[A ] 60. c:\program files\common files\microsoft shared\web folders\msonsext.dll
Microsoft Corporation
Microsoft Web Folders
.text,.data,.rsrc,.reloc,
RISING
[AM] 61. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
+ 用户登陆自运行项目
+ HKCU\Software\Microsoft\Windows\CurrentVersion\Run
DAEMON Tools Pro Agent
[AM] 62. d:\daemon tools pro\dtproagent.exe
DT Soft Ltd.
DAEMON Tools Pro Tray Application
UPX0,UPX1,.rsrc,
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
JMB36X IDE Setup
[A ] 63. c:\windows\jm\jminside.exe
.text,.rdata,.data,
JMB36X Configure
[A ] 64. c:\windows\system32\jmraidsetup.exe
JMicron Technology Corp.
JMicron JMB36X RAID Configurer
.text,.rdata,.data,.rsrc,
SkyTel
[A ] 65. c:\windows\skytel.exe
Realtek Semiconductor Corp.
Realtek Voice Manager
.text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc,
RTHDCPL
[AM] 66. c:\windows\rthdcpl.exe
Realtek Semiconductor Corp.
Realtek HD Audio Control Panel
.text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc,
Alcmtr
[A ] 67. c:\windows\alcmtr.exe
Realtek Semiconductor Corp.
Realtek Azalia Audio - Event Monitor
.text,.rdata,.data,.rsrc,
nwiz
[A ] 68. c:\windows\system32\nwiz.exe
.text,.rdata,.data,.rsrc,
Thunder
[A ] 52. d:\迅雷5\thunder.exe
Thunder Networking Technologies,LTD
.text,.rdata,.data,.rsrc,
ISUSPM Startup
[A ] 69. c:\program files\common files\installshield\updateservice\isuspm.exe
InstallShield Software Corporation
InstallShield Update Service Update Manager
.text,.rdata,.data,.rsrc,
ISUSScheduler
[AM] 70. c:\program files\common files\installshield\updateservice\issch.exe
InstallShield Software Corporation
InstallShield Update Service Scheduler
.text,.rdata,.data,.rsrc,
runeip
[AM] 71. d:\卡卡上网安全助手\runiep.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Monitor
.text,.rdata,.data,.rsrc,
RfwMain
[AM] 72. d:\瑞星个人防火墙\rfwmain.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,
RavTask
[A ] 73. d:\瑞星杀毒软件\ravtask.exe
Beijing Rising Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
KKDelay
[A ] 74. d:\卡卡上网安全助手\runonce.exe
Beijing Rising Technology Co., Ltd.
RunOnce Application
.text,.rdata,.data,.rsrc,
+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 75. c:\windows\system32\bsmain.exe
Beijing Rising Technology Co., Ltd.
BootScan
.text,.data,.rsrc,.reloc,
[A ] 76. c:\windows\system32\kknative.exe
Beijing Rising Technology Co., Ltd.
NativeAp
.text,.data,.rsrc,.reloc,
+ 映像劫持
+ HKCR\Folder\shell
木马克星扫描
[A ] 77. d:\iparmor\iparmor.exe
luosoft.com
木马克星
,,,,,,,.rsrc,.luo,.adata,
+ HKCR\.exe
exefile\木马克星扫描\Command
[A ] 77. d:\iparmor\iparmor.exe
luosoft.com
木马克星
,,,,,,,.rsrc,.luo,.adata,
非凡123 - 2007-9-18 1:45:00
+ 正在运行的进程
+ 00000150(336) Explorer.EXE
00400000[00009000]
[ M] 78. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
41D50000[00045000]
[ M] 79. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
422B0000[005CB000]
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
10000000[00020000]
[ M] 80. c:\windows\system32\bcmtig5h.dll
.text,.rdata,.data,.reloc,
72C80000[00008000]
[ M] 81. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
01DC0000[0076D000]
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,CONST,.rsrc,.reloc,
02640000[00036000]
[ M] 82. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
026C0000[00036000]
[ M] 83. c:\windows\system32\nvapi.dll
.text,.rdata,.data,.idata,.rsrc,.reloc,
02710000[00073000]
[AM] 59. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
028B0000[0001B000]
[ M] 84. d:\卡卡上网安全助手\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
60E00000[0001B000]
[ M] 85. d:\qq 2007\qdshm.dll
QQDiskShellMenu Module
.text,.rdata,.data,.rsrc,.reloc,
6BC40000[000F2000]
[ M] 86. d:\qq 2007\mfc42.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.rdata,.data,.rsrc,.reloc,
02A40000[0002D000]
[AM] 57. d:\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,
02AD0000[0001B000]
[AM] 61. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 87. d:\瑞星杀毒软件\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
03050000[0001D000]
[ M] 88. d:\daemon tools pro\imgshl32.dll
DT Soft Ltd.
DAEMON Tools Pro Disc Image Shell Extension
UPX0,UPX1,.rsrc,
03080000[0000E000]
[ M] 89. d:\daemon tools pro\dtproapi.dll
DT Soft Ltd.
DAEMON Tools Pro API
UPX0,UPX1,.rsrc,
030A0000[000BE000]
[ M] 90. d:\daemon tools pro\dtpro.dll
DT Soft Ltd.
DAEMON Tools Pro control library
.text,.rdata,.data,.rsrc,.dtp0,.dtp1,.reloc,
78130000[0009B000]
[ M] 91. d:\daemon tools pro\msvcr80.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
03170000[000AF000]
[ M] 92. d:\daemon tools pro\dtprohlp.dll
DTSoft Ltd
DAEMON Tools Pro Helper library
UPX0,UPX1,.rsrc,
03230000[00017000]
[ M] 93. d:\daemon tools pro\cryptapi.dll
.text,.rdata,.data,.rsrc,.reloc,.paradox,
入口点在最后一个节;
7C420000[00087000]
[ M] 94. d:\daemon tools pro\msvcp80.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
03260000[00064000]
[ M] 95. d:\daemon tools pro\starburn.dll
Rocket Division Software
StarBurn CD/DVD/Blu-Ray/HD-DVD Burning, Grabbing and Mastering Toolkit for Windows 95/98/Me/NT/2000/XP/2003/Vista/Longhorn
.text,.rdata,.data,.idata,.rsrc,.reloc,
032D0000[00077000]
[ M] 96. d:\daemon tools pro\dtprores.dll
DT Soft Ltd.
DAEMON Tools Pro Common resources
UPX0,UPX1,.rsrc,
782E0000[0010F000]
[ M] 97. d:\daemon tools pro\mfc80u.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.data,.rsrc,.reloc,
033D0000[00005000]
[ M] 98. d:\daemon tools pro\plugins\images\ccdmount.dll
DT Soft Ltd.
CloneCD image access library
.text,.rsrc,.reloc,
033F0000[00006000]
[ M] 99. d:\daemon tools pro\plugins\images\bw5mount.dll
Blindwrite 5/6 image access library
.text,.data,.rsrc,.reloc,
03410000[0000A000]
[ M] 100. d:\daemon tools pro\plugins\images\mdsmount.dll
DT Soft Ltd.
Media descriptor file access library
.text,.data,.rsrc,.reloc,
03430000[00006000]
[ M] 101. d:\daemon tools pro\plugins\images\nrgmount.dll
DT Soft Ltd.
Nero image access library
.text,.rsrc,.reloc,
03450000[00005000]
[ M] 102. d:\daemon tools pro\plugins\images\pdimount.dll
DT Soft Ltd.
InstantCD/DVD image access library
.text,.rsrc,.reloc,
03470000[00005000]
[ M] 103. d:\daemon tools pro\plugins\images\cuemount.dll
DT Soft Ltd.
CUE image access library
.text,.rsrc,.reloc,
03490000[00007000]
[ M] 104. d:\daemon tools pro\plugins\images\bwtmount.dll
DT Soft Ltd.
BWT image access library
.text,.data,.rsrc,.reloc,
034B0000[00005000]
[ M] 105. d:\daemon tools pro\plugins\images\iszmount.dll
DT Soft Ltd.
ISZ image access library
.text,.data,.rsrc,.reloc,
034D0000[00004000]
[ M] 106. d:\daemon tools pro\plugins\images\pfcmount.dll
DT Soft Ltd.
Padus CDI image access library
.text,.rsrc,.reloc,
034E0000[00031000]
[ M] 107. d:\daemon tools pro\pfctoc.dll
Padus(R), Inc.
CD/DVD pre-mastering toolkit for Win32
UPX0,UPX1,.rsrc,
0BEF0000[00037000]
[ M] 108. c:\windows\system32\mfplat.dll
Microsoft Corporation
Media Foundation Platform DLL
.text,.data,.rsrc,.reloc,
10930000[00049000]
[ M] 109. c:\windows\system32\portabledeviceapi.dll
Microsoft Corporation
Windows Portable Device API Components
.text,.orpc,.data,.rsrc,.reloc,
+ 0000022c(556) RfwMain.exe
00400000[00073000]
[AM] 72. d:\瑞星个人防火墙\rfwmain.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,
26600000[0007D000]
[ M] 110. d:\瑞星个人防火墙\rsguilib.dll
Beijing Rising Technology Co., Ltd.
Rising GUI Library Loader
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 111. d:\瑞星个人防火墙\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
10000000[0000F000]
[ M] 112. d:\瑞星个人防火墙\rfwctrl.dll
Beijing Rising Technology Co., Ltd.
RfwCtrl DLL
.text,.rdata,.data,.rsrc,.reloc,
23800000[0001A000]
[ M] 113. d:\瑞星个人防火墙\rsxml.dll
Beijing Rising Technology Co., Ltd.
RsXML
.text,.rdata,.data,.rsrc,.reloc,
23900000[00031000]
[ M] 114. d:\瑞星个人防火墙\pngdll.dll
Beijing Rising Technology Co., Ltd.
Rising .Png File Loader Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
01330000[0001B000]
[ M] 84. d:\卡卡上网安全助手\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
非凡123 - 2007-9-18 1:46:00
+ 正在运行的进程
+ 00000150(336) Explorer.EXE
00400000[00009000]
[ M] 78. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
41D50000[00045000]
[ M] 79. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
422B0000[005CB000]
[AM] 49. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
10000000[00020000]
[ M] 80. c:\windows\system32\bcmtig5h.dll
.text,.rdata,.data,.reloc,
72C80000[00008000]
[ M] 81. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
01DC0000[0076D000]
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,CONST,.rsrc,.reloc,
02640000[00036000]
[ M] 82. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
026C0000[00036000]
[ M] 83. c:\windows\system32\nvapi.dll
.text,.rdata,.data,.idata,.rsrc,.reloc,
02710000[00073000]
[AM] 59. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
028B0000[0001B000]
[ M] 84. d:\卡卡上网安全助手\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
60E00000[0001B000]
[ M] 85. d:\qq 2007\qdshm.dll
QQDiskShellMenu Module
.text,.rdata,.data,.rsrc,.reloc,
6BC40000[000F2000]
[ M] 86. d:\qq 2007\mfc42.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.rdata,.data,.rsrc,.reloc,
02A40000[0002D000]
[AM] 57. d:\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,
02AD0000[0001B000]
[AM] 61. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 87. d:\瑞星杀毒软件\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
03050000[0001D000]
[ M] 88. d:\daemon tools pro\imgshl32.dll
DT Soft Ltd.
DAEMON Tools Pro Disc Image Shell Extension
UPX0,UPX1,.rsrc,
03080000[0000E000]
[ M] 89. d:\daemon tools pro\dtproapi.dll
DT Soft Ltd.
DAEMON Tools Pro API
UPX0,UPX1,.rsrc,
030A0000[000BE000]
[ M] 90. d:\daemon tools pro\dtpro.dll
DT Soft Ltd.
DAEMON Tools Pro control library
.text,.rdata,.data,.rsrc,.dtp0,.dtp1,.reloc,
78130000[0009B000]
[ M] 91. d:\daemon tools pro\msvcr80.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
03170000[000AF000]
[ M] 92. d:\daemon tools pro\dtprohlp.dll
DTSoft Ltd
DAEMON Tools Pro Helper library
UPX0,UPX1,.rsrc,
03230000[00017000]
[ M] 93. d:\daemon tools pro\cryptapi.dll
.text,.rdata,.data,.rsrc,.reloc,.paradox,
入口点在最后一个节;
7C420000[00087000]
[ M] 94. d:\daemon tools pro\msvcp80.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
03260000[00064000]
[ M] 95. d:\daemon tools pro\starburn.dll
Rocket Division Software
StarBurn CD/DVD/Blu-Ray/HD-DVD Burning, Grabbing and Mastering Toolkit for Windows 95/98/Me/NT/2000/XP/2003/Vista/Longhorn
.text,.rdata,.data,.idata,.rsrc,.reloc,
032D0000[00077000]
[ M] 96. d:\daemon tools pro\dtprores.dll
DT Soft Ltd.
DAEMON Tools Pro Common resources
UPX0,UPX1,.rsrc,
782E0000[0010F000]
[ M] 97. d:\daemon tools pro\mfc80u.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.data,.rsrc,.reloc,
033D0000[00005000]
[ M] 98. d:\daemon tools pro\plugins\images\ccdmount.dll
DT Soft Ltd.
CloneCD image access library
.text,.rsrc,.reloc,
033F0000[00006000]
[ M] 99. d:\daemon tools pro\plugins\images\bw5mount.dll
Blindwrite 5/6 image access library
.text,.data,.rsrc,.reloc,
03410000[0000A000]
[ M] 100. d:\daemon tools pro\plugins\images\mdsmount.dll
DT Soft Ltd.
Media descriptor file access library
.text,.data,.rsrc,.reloc,
03430000[00006000]
[ M] 101. d:\daemon tools pro\plugins\images\nrgmount.dll
DT Soft Ltd.
Nero image access library
.text,.rsrc,.reloc,
03450000[00005000]
[ M] 102. d:\daemon tools pro\plugins\images\pdimount.dll
DT Soft Ltd.
InstantCD/DVD image access library
.text,.rsrc,.reloc,
03470000[00005000]
[ M] 103. d:\daemon tools pro\plugins\images\cuemount.dll
DT Soft Ltd.
CUE image access library
.text,.rsrc,.reloc,
03490000[00007000]
[ M] 104. d:\daemon tools pro\plugins\images\bwtmount.dll
DT Soft Ltd.
BWT image access library
.text,.data,.rsrc,.reloc,
034B0000[00005000]
[ M] 105. d:\daemon tools pro\plugins\images\iszmount.dll
DT Soft Ltd.
ISZ image access library
.text,.data,.rsrc,.reloc,
034D0000[00004000]
[ M] 106. d:\daemon tools pro\plugins\images\pfcmount.dll
DT Soft Ltd.
Padus CDI image access library
.text,.rsrc,.reloc,
034E0000[00031000]
[ M] 107. d:\daemon tools pro\pfctoc.dll
Padus(R), Inc.
CD/DVD pre-mastering toolkit for Win32
UPX0,UPX1,.rsrc,
0BEF0000[00037000]
[ M] 108. c:\windows\system32\mfplat.dll
Microsoft Corporation
Media Foundation Platform DLL
.text,.data,.rsrc,.reloc,
10930000[00049000]
[ M] 109. c:\windows\system32\portabledeviceapi.dll
Microsoft Corporation
Windows Portable Device API Components
.text,.orpc,.data,.rsrc,.reloc,
+ 0000022c(556) RfwMain.exe
00400000[00073000]
[AM] 72. d:\瑞星个人防火墙\rfwmain.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,
26600000[0007D000]
[ M] 110. d:\瑞星个人防火墙\rsguilib.dll
Beijing Rising Technology Co., Ltd.
Rising GUI Library Loader
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 111. d:\瑞星个人防火墙\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
10000000[0000F000]
[ M] 112. d:\瑞星个人防火墙\rfwctrl.dll
Beijing Rising Technology Co., Ltd.
RfwCtrl DLL
.text,.rdata,.data,.rsrc,.reloc,
23800000[0001A000]
[ M] 113. d:\瑞星个人防火墙\rsxml.dll
Beijing Rising Technology Co., Ltd.
RsXML
.text,.rdata,.data,.rsrc,.reloc,
23900000[00031000]
[ M] 114. d:\瑞星个人防火墙\pngdll.dll
Beijing Rising Technology Co., Ltd.
Rising .Png File Loader Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
01330000[0001B000]
[ M] 84. d:\卡卡上网安全助手\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
lai7yuon - 2007-9-18 15:40:00
我是菜鸟，没看懂楼主发的这些，不过我一直用瑞星，好象没发现什么问题。
1
© 2000 - 2026 Rising Corp. Ltd.